Pull up UDP, ICMP fixes:
- Drop packet, increment udps_badlen if the udp header length field
reports a size smaller than the udp header; defends against bogus
packets seen by by Assar Westerlund.
- allow icmp_error() to work when icmpreturndatabytes is sufficiently
large that the icmp error message doesn't fit in a header mbuf.
- defend against mbuf chains shorter than their contained ip->ip_len.
Joint work of myself, itojun, and assar
Approved by thorpej
revisions pulled up:
sys/netinet/ip_icmp.c 1.52
sys/netinet/udp_usrreq.c 1.70